t 



Serial No. 09/503,282 



IN THE CLAIMS 



The claim are amended as tollows: 



1 . (Previously amended^ A packet processor comprising: 
a control unit having a data input bus; 

at least one encryption processing unit; 
a first authentication processing unit; 
a second authentication/processing unit; 

a local data bus, independent of the data input bus to the control unit, 
coupling the control unit to each of the encryption and authentication processing 
units; and / 

a second data bus from the encryption processing unit to each 
authentication processing Ajnit, including a data bus from the first authentication 
processijng unit to the second authentication processing unit. 

2. (Previously amended) A packet processor as recited in claim 1, 
wherein said data input bus of the control unit is coupled to a processor bus, 
and wherein each of said encryption and authentication processing units 

3. (Previously amended) A packet processor as recited in claim 1, 
wherein said data/ input bus of the control unit is coupled to a processor bus and 
each of said encryption and authentication processing units comprises a data 
input bus to th^ processor bus and means for reading and writing data on the 
processor busy 
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4. (Previously amended) A packet processor as recited in claim 1 , 
wherein said second data bus connprises a daisy-chain connection between the 
encryption and authenticatton processing units. 

5. (Currently amended) A method of processing data packets 
comprising: 

coupling a control unit to a first data bus; 

receiving first and second data packets in the control unit from the first 
data bus; 

providing a plurality o' processing units in data communication with the 
control unit over a second data bus, independent of the first data bus, said 

least one encryption processing unit and at least 
g unit; 

irst data packet from the control unit to said at 



processing units including at 
one authentication processin 
providing data of the 



least one encryption processing unit one of th e proc e ss i ng un i ts , over the second 



the first data packet from sa 
process i ng units ; 



data bus; 

processing said data fijom the first data packet with said at least one 
encryption processing unit ef l o of the proc e ssing un i ts to provide output data for 



d at least one encryption processing unit on e of th e 



communicating said output data for the first data packet from said at 



least one encryption process! 



ig unit on e of th e proc e ssing units to said at least 



one authentication processing unit anoth e r of th e proc e ss i ng un i ts for further 



processing; and 

providing data from thfe second data packet to said at least one 
encryption processing unit arid processing the data from the second data packet 



in the at least one encryptioh 



processing unit on e of the proc e ssing un i ts, while 
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said at least one authentication processing unit other proc e ssing unit further 



processes the output 



data for the first data packet. 



6. (Previousjly 
one of the processing 
other of said processi 



ng 



7. (Previouslly 
at least one authentication 
authentication 



amended) A method as recited in claim 5, wherein said 
units comprises an encryption processing unit and said 
units comprises an authentication processing unit. 



amended) A method as recited in claim 5, wherein said 
processing unit comprises a first and second 
units. 



process ng 



8. (Original) lA method as recited in claim 5, wherein said step of 
communicating the output data from one of the processing units to another of 
the processing units comprises communicating said output data over a daisy- 
chain connection between said processing units. 

9. (Previously amended) A method of processing data in a computer, 
the method comprising tie steps of: 

performing encryption on a first data packet within an encryption 
processing unit; and 

after completion o ' the encryption of the first data packet, 

performing authentication of the first data packet within at least 
one authentication processing unit connected to the encryption processing unit 
by a data bus, and 

performing encryption of a second data packet within the 
encryption processing unit\prior to completion of authentication of the first data 
packet. 
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10. (Origfjnal) The method of claim 9, wherein the authentication is a 
first authentications further comprising the step of performing a second 
authentication on tme first data packet of data. 

1 1 . (Original) The method of claim 10, wherein the first authentication 
is performed on the encrypted first data packet. 

12. (Original! '^^^ method of claim 10, wherein the first authentication 
appends data to the ancrypted first data packet. 




1 3. (Original) iThe method of claim 1 2, wherein the second 
authentication is perfor\med on the encrypted first data packet and the appended 
data. 



14. (Original) The method of claim 10, further comprising the step of 
performing the encryption of the second data packet after beginning the second 
authentication of the firsi data packet. 

15. (Previously amended) A method of processing data in a computer, 
the method comprising the steps of: 

encrypting a first data packet with an encryption processing module; 

authenticating the eiicrypted first data packet with a first authentication 
processing module; 1 

encrypting a second Idata packet with the encryption processing module 
while authenticating the first data packet with the first authentication 
processing module connected to the encryption processing module by a data 
bus; and 
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authenticating tn^ second data packet with the first authentication 
processing module. 

16. (Previously ^nnended) An apparatus for processing data, 
comprising: 

a computer having la data storage device connected thereto, wherein the 
data storage device stores a data; 

one or more computer programs, performed by the computer, for 
performing encryption on a| first data packet within an encryption processing 
unit, and, after completion pf the encryption of the first data packet, performing 
authentication of the first data packet in at least one authentication processing 
unit connected to the encryption processing unit by a data bus, and performing 
encryption of a second datalpacket within the encryption processing unit prior 
to completion of authenticatrpn of the first data packet. 

17. (Original) The apparatus of claim 16, wherein the authentication is 
a first authentication, further comprising means for performing a second 
authentication on the first data packet of data. 

18. (Original) The apparatus of claim 17, wherein the first 
authentication is performed onlthe encrypted first data packet. 

19. (Original) The apparatus of claim 17, wherein the first 
authentication appends data to rthe encrypted first data packet. 

20. (Original) The apparatus of claim 19, wherein the second 
authentication is performed on tl^e encrypted first data packet and the appended 
data. 
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21 . (Original) The apparatus of claim 17, further comprising the means 
for performing the encryption of the second data packet after beginning the 
second authenticaticin of the first data packet. 



22. (Previously amended) An apparatus for processing data, 
comprising: 

a computer haN^ing a data storage device connected thereto, wherein the 
data storage device stores a data; 

one or more computer programs, performed by the computer, for 
encrypting a first data packet with an encryption processing module, 
authenticating the encrypted first data packet with a first authentication 



processing module con 



nected to the encryption processing module by a data 



bus, encrypting a secorid data packet with the encryption processing module 
while authenticating thfj first data packet with the first authentication 
processing module, and! authenticating the second data packet with the first 
authentication processirg module. 



23. (Previously 
computer program carri 



amended) An article of manufacture comprising a 
readable by a computer and embodying one or more 
nstructions executable tly the computer to perform method steps for processing 
data, the method comprising the steps of: 

performing encrypt|ion on a first data packet with an encryption 
processing unit; and 

after completion of Vthe encryption of the first data packet, 

performing authentication of the first data packet in at least one 
authentication processing 0|nit connected to the encryption processing unit by a 
data bus, and 
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performing encryption of a second data packet within the 
encryption processing unit prior to completion of authentication of the first data 
packet. 

24. (Origir^al) The article of manufacture of claim 23, wherein the 
authentication is a llirst authentication, further comprising the step of performing 
a second authentication on the first data packet of data. 

25. (Original) The article of manufacture of claim 24, wherein the first 
authentication is perfprmed on the encrypted first data packet. 

26. (OriginalMThe article of manufacture of claim 24, wherein the first 
authentication appends data to the encrypted first data packet. 

27. (Original) The article of manufacture of claim 26, wherein the 
second authentication il performed on the encrypted first data packet and the 
appended data. 

28. (Original) Thie article of manufacture of claim 24, further comprising 
the step of performing the encryption of the second data packet after beginning 
the second authentication! of the first data packet. 

29. (Previously amended) An article of manufacture comprising a 
computer program carrier readable by a computer and embodying one or more 
instructions executable by me computer to perform method steps for processing 
data, the method comprising the steps of: 

encrypting a first data packet with an encryption processing module; 
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authenticating the 
processing module connectejJ 

encrypting a second 
while authenticating the firsl 



encjrypted first data packet with a first authentication 
to the encryption processing unit by a data bus; 
d)ata packet with the encryption processing module 
data packet with the first authentication 



processing module; and 

authenticating the sedond data packet with the first authentication 
processing module. 

30. (Previously amended) A method of processing data packets 
comprising: 

coupling a control unit to a first data bus; 

receiving a first data packet in the control unit from the first data bus; 
providing a plurality of Iprocessing units in data communication with the 
control unit over a second daia bus, independent of the first data bus, said 
processing units including at \ BasX one encryption processing unit and at least 
one authentication processing unit; 

providing data of the first data packet from the control unit to multiple 
processing units, over the second data bus; 

rn 



processing said data fro 
processing units in parallel. 



the first data packet with said multiple 



31. (Previously amended) A method as recited in claim 30, wherein 
said plurality of processing units comprises at least one encryption processing 
unit and a plurality of authentication processing units. 



32. (New) A method asWecited in claim 5, wherein said at least one 
authentication processing unit performs an integrity check of said output data. 
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33. (New) A method as recited in claim 32, wherein said at least one 
authentication processing unit comprises an HMAC core. 

34. (New) A\method as recited in claim 32, wherein said integrity 
check is performed using HMAC- key hashing. 

35. (New) A rmethod of processing data packets comprising: 
coupling a control! unit to a first data bus; 

receiving first and\second data packets in the control unit from the first 
data bus; 

providing a plurality of processing units in data communication with the 
control unit over a first local data bus, independent of the first data bus, said 
processing units includinglat least one encryption processing unit and at least 
one authentication processing unit, the at least one authentication processing 
unit being coupled to the m. least one encryption processing unit by a second 
local data bus separate from the first data bus and the first local data bus; 

providing data of thelfirst data packet from the control unit to said at 
least one encryption processing unit, over the first local data bus; 

processing said data irom the first data packet with said at least one 
encryption processing unit tQ provide output data for the first data packet from 
said at least one encryption processing unit; 

communicating said output data for the first data packet from said at 
least one encryption processiLg unit to said at least one authentication 
processing unit via the secona local data bus for further processing; and 

providing data from the second data packet to said at least one 
encryption processing unit for processing by the at least one encryption 
processing unit , while said ax least one authentication processing unit further 
processes the oiltput data for the first data packet. 
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36. (New) A method of processing data in a computer, the method 
comprising the steAs of: 

performing encryption on a first data packet within an encryption 



processing unit; an 
after comple 



one authentication 
processing unit by a 



ion of the encryption of the first data packet. 



performing authentication of the first data packet within at least 



)rocessing unit directly connected to the encryption 
local data bus, and 



perforniing encryption of a second data packet within the 
encryption processing unit prior to completion of authentication of the first data 
packet. I 

37. (New) A method of processing data in a computer, the method 
comprising the steps lof: 

encrypting a finst data packet with an encryption processing module; 

authenticating ^he encrypted first data packet with a first authentication 
processing module; 

encrypting a second data packet with the encryption processing module 
while authenticating the first data packet with the first authentication 
processing module directly connected to the encryption processing module by a 
local data bus; and 

authenticating the second data packet with the first authentication 
processing module. 

38. (New) An lapparatus for processing data, comprising: 
a computer having a data storage device connected thereto, wherein the 

data storage device storis a data; 
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one or more computer programs, performed by the computer, for 
performing encryptior on a first data packet within an encryption processing 
unit, and, after comp etion of the encryption of the first data packet, performing 
authentication of the first data packet in at least one authentication processing 
unit directly connectcfd to the encryption processing unit by a local data bus, 
and performing encrvption of a second data packet within the encryption 
processing unit prior to completion of authentication of the first data packet. 



39. (New) 
a computer 

data storage device 
one or more 

encrypting a first 

authenticating the 

processing module 

local data bus, 

module while 

processing module, 

authentication 



hav 



daia 



An apparatus for processing data, comprising: 

ing a data storage device connected thereto, wherein the 
stores a data; 
computer programs, performed by the computer, for 

packet with an encryption processing module, 
erlicrypted first data packet with a first authentication 
directly connected to the encryption processing module by a 
ng a second data packet with the encryption processing 
ing the first data packet with the first authentication 
nd authenticating the second data packet with the first 
ing module. 



encry pt 



authenticat 



carrier readable by a 
executable by the co 



process 



40. (New) >^n article of manufacture comprising a computer program 



computer and embodying one or more instructions 
Tiputer to perform method steps for processing data, the 
method comprising t\\e steps of: 

performing encryption on a first data packet with an encryption 



processing unit; and 
after completio 



of the encryption of the first data packet. 
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perforlning authentication of the first data packet in at least one 
authentication proc€ ssing unit directly connected to the encryption processing 
unit by a local data jus, and 

performing encryption of a second data packet within the 
encryption processir g unit prior to completion of authentication of the first data 
packet. 

41 . (New) An article of manufacture comprising a computer program 
carrier readable by a computer and embodying one or more instructions 
executable by the computer to perform method steps for processing data, the 
method comprising Ihe steps of: 

encrypting a first data packet with an encryption processing module; 

authenticating the encrypted first data packet with a first authentication 
processing module directly connected to the encryption processing unit by a 
local data bus; 

encrypting a second data packet with the encryption processing module 
while authenticating Ihe first data packet with the first authentication 
processing module; and 

authenticating the second data packet with the first authentication 
processing module. 



42. (New) A 
coupling a cont 



method of processing data packets comprising: 
ol unit to a first data bus; 
receiving a first Idata packet in the control unit from the first data bus; 
providing a plurality of processing units in data communication with the 
control unit over a firstllocal data bus, independent of the first data bus, said 
processing units including at least one encryption processing unit and at least 
one authentication processing unit, the at least one encryption processing unit 
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and the at least onej authentication processing unit being coupled together by 
second local data bus; 

providing dala of the first data packet fronn the control unit to multiple 
processing units, over the first local data bus; 

processing s^id data from the first data packet with said multiple 
processing units in barallel. 
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